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Amendments to the j Specificatloii 

Please replace the paiiagrapb on Page 2 beginning on line 21 and continuing to Page 3, line 7 
with the following amended paragraph: 



In accordance! with this invention there is provided a method for generating a shared 
secret value between Entities in a data communication system, one or more of the entities having 
a plurality of members for participation in the communication systan, each member having a 
long term private keyjand a corresponding long term public key, the method comprising the steps 
of: 

generating an e ntity long torm private key and oorrooponding endty long term 
public key for each entity by combining the long tenn private and public keys of 
each m;embers of the entity. 

genomting a short term private and a corresponding short term public key for each 
of the ^lembers; 

oxohoniging making said short term public key available to members within 
an entity; 
for each member: 

^computing an intra-entity shared key by mathematically combining said 
ishort term public keys of each said member; 
jcomputing an intra-entity public key by mathematically combining its 
jshort-tenn private key, the long term private key and said intra-entity 
Ishared key; 

for eac| entity combining intra-entity public keys to derive a group short-term 
public l^ey; 

each enjtity transmitting making its intra-entity shared key and its group ohort term 
public koy entity long term public kev available to said other entities; and 



(a) 



(b) 



(c) 



(d) 



(e) 
(0 
(g) 



(i) 
(ii) 



each entity computing a common shared key K by combining its group short term 
public key, with the intra-entity shared key, and an entity long term public key 
received from the other entity. 
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Please replace the pajagraph on Page 3, beginning on line 17 with the following amended 
paragraph: 

Referring to figure 1, a schematic diagram of a communication system is shown generally 
by numeral 10. The System 10 includes a first entity A (12) and a second entity (B) that 
exchange data over a icommunication channel 16. Each of the entities A and B include members 
Ai, A2...A0, and Bi, $2---[[Bn]] B™, respectively. For convenience, the embodiment described 
has two members Al,; A2 and Bl, B2 although it will be appreciated that typically each entity 
will have several members. It is assumed the entities A and B include processors for perfonning 
cryptographic operations and the like. The members Al, A2 may for example be a first group of 
users on a local area rietwork (LAN) that wish to communicate securely with a second group of 
users Bl, B2 on a secdnd LAN or even on the same LAN. In either case the computations may 
be performed for the entities A (12) and B (14) by for example a LAN server 1 8 or the like, 
provided that each member has its own secure boundary. 

Please replace the par^iaph on Page 4 beginning on line 21 with the following amended 
paragraph: 

Next, member iAi computes r=xiP + xjP and similarly, entity member A2 computes r=X2p 
+ xiP. Thus, establishbs an intra-entity shared key available and containing a contribution from 
each member of the eiltity. 
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